https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-25926.htmlhttps://patchthecve.com/cve/CVE-2021-25926.htmlWed, 17 Jun 2026 03:42:35 +0000MEDIUM 6.1: In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the `quicksearch` feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out any actions in the cohttps://patchthecve.com/cve/CVE-2021-25925.htmlhttps://patchthecve.com/cve/CVE-2021-25925.htmlWed, 17 Jun 2026 03:42:35 +0000MEDIUM 5.4: in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive inforhttps://patchthecve.com/cve/CVE-2018-9160.htmlhttps://patchthecve.com/cve/CVE-2018-9160.htmlWed, 17 Jun 2026 02:06:10 +0000CRITICAL 9.8: SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.